$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: BUw3mztJ3Ogbbp6NJU4O1dpUn4uFfEiq8bvJNw9aouE= Subject key identifier: 5A:F5:25:C1:23:99:7F:B7:77:A9:0B:0D:4D:7D:A7:DD:5C:91:EB:33 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: D2 Signing time: Fri 25 Apr 2025 04:43:56 +0000 Manifest this update: Fri 25 Apr 2025 04:43:55 +0000 Manifest next update: Fri 02 May 2025 04:43:55 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: Of1hL70LvIcEI0wQkmtLdCFuNk63c2qPsShEglKWhOM=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Apr 25 04:43:55 2025 GMT Not After : May 2 04:43:55 2025 GMT Subject: CN=680b130b-1ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:90:a7:b6:63:bc:c5:3c:2b:d6:82:72:bd: 50:0e:7d:2b:0b:c8:6a:6e:47:9d:7b:8a:53:87:b4: 24:fe:3a:3a:7f:e3:5e:c3:8b:4a:0e:f3:7e:ae:94: 7c:e5:c3:cc:e3:73:37:8a:cd:97:de:b4:f4:df:e9: 10:b2:a6:22:db:6c:af:c2:aa:ce:38:c7:1b:e4:c9: 75:5b:d1:14:b1:3f:a9:23:f3:91:be:b5:ef:60:2b: 75:b4:d4:23:ad:f8:3e:d0:05:dc:0f:c8:3f:6f:44: c5:d7:6e:f6:9a:e3:99:35:de:4c:50:74:ce:79:18: eb:99:90:37:00:b2:22:3a:d5:11:b3:66:95:2e:6d: 5e:d9:c8:3e:3b:b1:15:64:ef:b4:d0:2d:c9:4c:a1: 7b:40:03:e7:58:4b:36:c8:23:98:41:a4:00:c1:a7: aa:49:e3:2f:13:d1:79:dc:32:22:17:58:4e:c7:48: ed:01:d7:88:b1:b3:91:ef:29:84:41:1c:89:b3:ec: fe:a3:5c:15:b5:8e:97:c2:db:49:97:ad:89:79:81: ea:a3:65:b7:09:45:91:61:2e:74:11:d1:3c:2f:ce: de:1a:9f:9b:76:bd:7d:e3:49:ab:23:22:e9:e9:17: 6e:e8:32:42:67:31:58:d6:d3:34:5a:c0:5f:21:95: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F5:25:C1:23:99:7F:B7:77:A9:0B:0D:4D:7D:A7:DD:5C:91:EB:33 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e3:06:49:7b:c4:b9:80:d5:de:a3:ae:0f:3e:25:0e:5c:9b: 4f:ac:00:a7:a0:d4:81:84:8e:92:75:25:74:c6:e8:5b:aa:85: 78:d7:dd:45:4e:02:3e:2f:de:8c:f8:d4:da:91:56:74:bc:bf: 64:72:d9:8d:3f:bf:c5:e1:56:a8:40:19:1d:4a:dc:99:05:74: 3a:53:5e:67:4f:e1:9c:d4:3e:6b:a4:9f:c5:e9:16:53:93:77: 4b:28:1a:69:c6:87:17:e2:d0:05:8a:e9:88:bd:5a:ae:76:0f: a0:fe:16:9d:83:81:b1:ad:62:af:d1:e0:fb:b7:3a:fe:7b:2e: 53:0d:5d:18:5a:f7:d9:78:d3:1b:4f:8d:03:20:a7:ba:22:6d: 06:ab:b7:e4:b0:49:a5:cc:d5:b7:be:fb:75:81:88:03:4f:e5: 95:d5:10:31:34:9f:a9:1b:67:ab:d7:be:87:0c:20:31:19:66: 9d:7a:fb:00:bf:17:7d:a4:29:25:33:25:56:a9:e6:49:83:63: 6f:6f:41:34:9d:cb:2e:43:c7:5d:18:29:8f:12:ee:dc:51:c6: 50:c4:71:91:fa:26:29:89:e7:5f:18:5a:5f:aa:6c:43:a6:fc: 79:64:da:90:5a:73:50:64:8d:3a:4c:d7:0e:37:8a:7b:66:c4: 12:e9:8c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUwNDI1MDQ0MzU1WhcNMjUwNTAyMDQ0MzU1WjAYMRYwFAYD VQQDEw02ODBiMTMwYi0xYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrSQp7ZjvMU8K9aCcr1QDn0rC8hqbkede4pTh7Qk/jo6f+New4tKDvN+rpR8 5cPM43M3is2X3rT03+kQsqYi22yvwqrOOMcb5Ml1W9EUsT+pI/ORvrXvYCt1tNQj rfg+0AXcD8g/b0TF1272muOZNd5MUHTOeRjrmZA3ALIiOtURs2aVLm1e2cg+O7EV ZO+00C3JTKF7QAPnWEs2yCOYQaQAwaeqSeMvE9F53DIiF1hOx0jtAdeIsbOR7ymE QRyJs+z+o1wVtY6XwttJl62JeYHqo2W3CUWRYS50EdE8L87eGp+bdr1940mrIyLp 6Rdu6DJCZzFY1tM0WsBfIZXuIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr1JcEj mX+3d6kLDU19p91ckeszMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4wZJe8S5gNXeo64PPiUOXJtPrACnoNSBhI6SdSV0xuhbqoV4191F TgI+L96M+NTakVZ0vL9kctmNP7/F4VaoQBkdStyZBXQ6U15nT+Gc1D5rpJ/F6RZT k3dLKBppxocX4tAFiumIvVqudg+g/hadg4GxrWKv0eD7tzr+ey5TDV0YWvfZeNMb T40DIKe6Im0Gq7fksEmlzNW3vvt1gYgDT+WV1RAxNJ+pG2er176HDCAxGWadevsA vxd9pCklMyVWqeZJg2Nvb0E0ncsuQ8ddGCmPEu7cUcZQxHGR+iYpiedfGFpfqmxD pvx5ZNqQWnNQZI06TNcON4p7ZsQS6Yw7 -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:16 2025 by rpki-client